Page MenuHomeFreeBSD

Fix broken STARTTLS when SharedMemoryKey is enabled
ClosedPublic

Authored by hrs on Feb 17 2020, 7:33 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Aug 24, 4:07 AM
Unknown Object (File)
Sat, Aug 22, 6:34 AM
Unknown Object (File)
Sat, Aug 15, 8:05 PM
Unknown Object (File)
Thu, Aug 13, 6:36 PM
Unknown Object (File)
Tue, Aug 11, 11:03 PM
Unknown Object (File)
Mon, Aug 10, 7:44 PM
Unknown Object (File)
Mon, Aug 10, 6:37 PM
Unknown Object (File)
Sun, Aug 9, 3:40 PM
Subscribers

Details

Summary

OpenSSL 1.1 API patch for sendmail has a bug which
prevents sm_RSA_generate_key() function from working.
This function is used to generate a temporary RSA key
for a shared memory region used for TLS processing.
Note that 12.0 and 12.1-RELEASE include this bug.

To trigger this bug, SM_CONF_SHM compile-time
option (enabled by default) and SharedMemoryKey
run-time option (not enabled by default) in a .cf file
are required. The latter corresponds to
confSHARED_MEMORY_KEY in a .mc file. See also Bug 242861.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable